Distillation

🔴 (11:50) User’s .github/workflows/ci-poller-dispatch.yml defines the manually triggered Run CI Status Poller workflow with permissions: {} and one dispatch job running on ubuntu-latest in the protected production environment; its only step runs ":". 🔴 (11:50) User stated repository secrets must never be used by .github/workflows/ci-poller-dispatch.yml; protected production environment secrets enforce that an arbitrary dispatched ref cannot add them, and production permits deployments only from main. 🔴 (11:50) User’s .github/workflows/cocoapods-keepalive.yml defines CocoaPods Token Keep-Alive, scheduled via cron "0 0 * * *" every day at midnight UTC because CocoaPods sessions expire after 3 days of inactivity (VALIDITY_LENGTH). 🔴 (11:50) The keepalive job in .github/workflows/cocoapods-keepalive.yml is named Refresh CocoaPods Session, runs on macos-15 in the production environment, has contents: read permission, and maps COCOAPODS_TRUNK_TOKEN to ${{ secrets.COCOAPODS_TRUNK_TOKEN }}. 🔴 (11:50) .github/workflows/cocoapods-keepalive.yml performs three ordered steps: 1. gem install cocoapods; 2. pod --version; 3. pod trunk me > /dev/null 2>&1 to refresh the CocoaPods session.